It's open source. Free riding is expected and normal. We all benefit from the work of others.

If you're not doing the work yourself, it makes sense to give the people who review and test their dependencies some time to do their work.